A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwbclient-develUpgrade libsmbclient-develUpgrade samba-devel | May 4, 2022 | May 5, 2021 |
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | May 5, 2021 |
| Amazon Linux Ami 2 | — | Upgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-vfs-glusterfsUpgrade ctdbUpgrade samba-debuginfoUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade samba-dcUpgrade samba-python-testUpgrade libsmbclientUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-pythonUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba-commonUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-develUpgrade samba-krb5-printingUpgrade sambaUpgrade samba-libsUpgrade ctdb-tests | Jul 2, 2021 | May 5, 2021 |
| Amazon_linux | — | Upgrade samba | Feb 19, 2022 | Apr 29, 2021 |
| Centos_linux | — | Upgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-debugsourceUpgrade libwbclient-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-vfs-glusterfs-debuginfoUpgrade ctdb-testsUpgrade samba-common-libs-debuginfoUpgrade samba-pidlUpgrade samba-python-testUpgrade samba-clientUpgrade python3-samba-debuginfoUpgrade libwbclient-develUpgrade ctdb-tests-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-dcUpgrade samba-testUpgrade samba-test-libsUpgrade samba-client-libsUpgrade samba-test-libs-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-krb5-locatorUpgrade python3-sambaUpgrade samba-common-libsUpgrade samba-krb5-printingUpgrade samba-libs-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-debuginfoUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-vfs-glusterfsUpgrade samba-libsUpgrade samba-winexeUpgrade samba-winbindUpgrade samba-test-debuginfoUpgrade libsmbclient-develUpgrade sambaUpgrade samba-client-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-develUpgrade samba-common-toolsUpgrade libsmbclient-debuginfoUpgrade samba-dc-libsUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-modulesUpgrade ctdbUpgrade samba-krb5-printing-debuginfoUpgrade samba-pythonUpgrade samba-commonUpgrade libwbclientUpgrade ctdb-debuginfo | Jun 9, 2021 | May 5, 2021 |
| Debian | — | Upgrade samba | May 31, 2021 | May 5, 2021 |
| Freebsd | — | Upgrade samba414Upgrade samba412Upgrade samba413 | Nov 4, 2022 | May 1, 2021 |
| Gentoo Linux | — | Upgrade net-fs/samba. | May 28, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-commonUpgrade samba-libsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-winbindUpgrade libwbclientUpgrade sambaUpgrade samba-pythonUpgrade samba-winbind-modulesUpgrade libsmbclient | Sep 16, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-winbindUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade libwbclientUpgrade samba-pythonUpgrade sambaUpgrade samba-client-libsUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-common-tools | Oct 26, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sambaUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-commonUpgrade samba-winbindUpgrade samba-libsUpgrade samba-pythonUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-winbind-modules | Sep 7, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-pidlUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade python2-samba-testUpgrade python3-samba-testUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libwbclientUpgrade python3-sambaUpgrade sambaUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-testUpgrade samba-clientUpgrade ctdbUpgrade python2-sambaUpgrade samba-winbind-krb5-locatorUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-test-libs | Aug 10, 2021 | May 5, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsmbclientUpgrade samba-commonUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-winbind | Aug 10, 2021 | May 5, 2021 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.13.8-11.4.39.0.1.107.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.13.8-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | May 5, 2021 |
| Oracle_linux | — | Upgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade python3-sambaUpgrade python3-samba-testUpgrade samba-winexeUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-dc-libsUpgrade samba-client-libsUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade sambaUpgrade samba-vfs-glusterfsUpgrade samba-python-testUpgrade libwbclient-develUpgrade libsmbclientUpgrade samba-commonUpgrade ctdb-testsUpgrade samba-pythonUpgrade ctdbUpgrade samba-pidlUpgrade samba-dcUpgrade samba-develUpgrade samba-testUpgrade libwbclientUpgrade samba-winbindUpgrade samba-krb5-printing | Jun 10, 2021 | Apr 29, 2021 |
| Qnap Qts | — | Upgrade QNAP QTS to the latest version | Aug 4, 2025 | Jun 16, 2021 |
| Redhat_linux | — | Upgrade libsmbclient-develUpgrade samba-client-libsUpgrade samba-common-tools-debuginfoUpgrade samba-develNo solution existsUpgrade samba-test-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-debuginfoUpgrade samba-krb5-printingUpgrade samba-testUpgrade sambaUpgrade samba-pidlUpgrade samba-winbind-modules-debuginfoUpgrade samba-test-libsUpgrade samba-libs-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-debuginfoUpgrade samba-libsUpgrade libwbclientUpgrade python3-sambaUpgrade samba-commonUpgrade samba-winbind-clients-debuginfoUpgrade ctdbUpgrade samba-winbind-debuginfoUpgrade samba-winbind-modulesUpgrade samba-python-testUpgrade samba-vfs-glusterfs-debuginfoUpgrade samba-winbindUpgrade samba-dc-libsUpgrade samba-client-libs-debuginfoUpgrade ctdb-testsUpgrade libwbclient-develUpgrade samba-vfs-glusterfsUpgrade samba-winbind-clientsUpgrade samba-dcUpgrade samba-debugsourceUpgrade ctdb-debuginfoUpgrade samba-winexeUpgrade samba-common-toolsUpgrade python3-samba-debuginfoUpgrade samba-common-libs-debuginfoUpgrade python3-samba-testUpgrade libsmbclientUpgrade ctdb-tests-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libs-debuginfoUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-clientUpgrade libwbclient-debuginfo | Jun 9, 2021 | May 5, 2021 |
| Rocky_linux | — | Upgrade samba-libs-debuginfoUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winexeUpgrade samba-client-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-client-libs-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-test-libsUpgrade samba-debugsourceUpgrade samba-winbind-clientsUpgrade samba-winbind-debuginfoUpgrade samba-winbind-modulesUpgrade ctdbUpgrade python3-samba-testUpgrade samba-develUpgrade samba-krb5-printing-debuginfoUpgrade sambaUpgrade libwbclient-develUpgrade python3-sambaUpgrade ctdb-tests-debuginfoUpgrade samba-winbindUpgrade samba-client-libsUpgrade libsmbclient-debuginfoUpgrade samba-debuginfoUpgrade samba-test-debuginfoUpgrade samba-krb5-printingUpgrade samba-winbind-modules-debuginfoUpgrade ctdb-testsUpgrade samba-testUpgrade ctdb-debuginfoUpgrade libwbclientUpgrade libwbclient-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-libsUpgrade samba-winexe-debuginfoUpgrade samba-common-libs-debuginfoUpgrade libsmbclient-devel | May 5, 2022 | May 5, 2021 |
| Samba | — | Upgrade to Samba 4.14.4 or later.Upgrade to Samba 4.13.8 or later.Upgrade to Samba 4.12.15 or later. | Jun 11, 2021 | May 5, 2021 |
| Suse | — | Upgrade libsmbconf-develUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-samr0-32bitUpgrade samba-python3Upgrade libsmbldap0Upgrade libsamba-passdb0-32bitUpgrade samba-winbind-libs-32bitUpgrade samba-ldb-ldapUpgrade libtalloc2-32bitUpgrade libsmbldap2-32bitUpgrade samba-winbindUpgrade samba-ad-dc-libsUpgrade libnetapi-devel-32bitUpgrade libsamba-credentials-develUpgrade samba-libs-python3Upgrade libndr-nbt-develUpgrade libtevent-util0-32bitUpgrade libtevent-util0Upgrade samba-libs-python3-32bitUpgrade libtdb1-32bitUpgrade libsmbldap-develUpgrade libsamba-policy0Upgrade libndr1-32bitUpgrade libndr-krb5pac-develUpgrade ctdb-pcp-pmdaUpgrade libsamba-errors0Upgrade samba-gpupdateUpgrade samba-client-libsUpgrade libsamba-passdb0Upgrade libsamdb0Upgrade samba-32bitUpgrade libdcerpc-develUpgrade libdcerpc-atsvc0Upgrade samba-winbind-32bitUpgrade samba-ad-dcUpgrade libndr-nbt0-32bitUpgrade ldapsmbUpgrade samba-docUpgrade libndr-krb5pac0Upgrade samba-core-develUpgrade libnetapi0Upgrade libndr-standard0-32bitUpgrade ctdb-testsUpgrade libdcerpc-binding0Upgrade sambaUpgrade samba-pythonUpgrade libndr-develUpgrade libdcerpc0Upgrade libtalloc2Upgrade libwbclient0-32bitUpgrade samba-cephUpgrade libwbclient-develUpgrade libndr-nbt0Upgrade samba-winbind-libsUpgrade samba-dsdb-modulesUpgrade libsamba-policy-python3-develUpgrade libsmbconf0-32bitUpgrade libndr0-32bitUpgrade libsmbclient-develUpgrade samba-libs-pythonUpgrade libdcerpc-samr0Upgrade samba-testUpgrade samba-libsUpgrade libdcerpc-binding0-32bitUpgrade libsamba-credentials0-32bitUpgrade libdcerpc-samr-develUpgrade libndr-standard-develUpgrade samba-libs-32bitUpgrade libwbclient0Upgrade samba-clientUpgrade libtdb1Upgrade libsamba-credentials0Upgrade samba-client-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-util-develUpgrade libsmbclient0-32bitUpgrade libsamba-passdb-develUpgrade libndr1Upgrade libsamba-errors0-32bitUpgrade libsamba-hostconfig-develUpgrade libndr0Upgrade samba-develUpgrade libsamba-util0Upgrade libdcerpc0-32bitUpgrade libtevent0-32bitUpgrade libsamdb0-32bitUpgrade libldb1Upgrade libsamba-errors-develUpgrade libsamdb-develUpgrade libsmbclient0Upgrade ctdbUpgrade libsamba-hostconfig0Upgrade libtevent-util-develUpgrade libnetapi0-32bitUpgrade libsamba-util0-32bitUpgrade libsmbldap0-32bitUpgrade libsmbldap2Upgrade libsamba-policy0-python3-32bitUpgrade libsmbconf0Upgrade libnetapi-develUpgrade libsamba-policy0-python3Upgrade samba-client-libs-32bitUpgrade libsamba-policy-develUpgrade libndr-standard0Upgrade libtevent0Upgrade samba-krb-printingUpgrade samba-ad-dc-32bit | Apr 30, 2021 | Apr 29, 2021 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Apr 30, 2021 | Apr 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub